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the Going Dark problem gotten worse for law enforcement over the past year? 

The impediments faced by law enforcement have been getting worse for quite some time 

incSse"° aS''eSor‘ceme^ introduced, and the number of providers 

crease, law enforcement faces an increasing number of diverse challenges. 

communications services are developed and deployed without 
consideration of law enforcement's iawful intercept needs. Under current law there is no 

r to do so. Communications Assistance to Law EnforLment 

nrniS J ■ f traditional telecommunications caM^rr 

i^du'de eUcrCotiontilff '™>n APPl® that their phones wiil 

inciuue encryption that the company is not able to unlock even in reennnca >. 

court order? How will this Impact the FBI's invertiga«« ablliSes? ’ 

“■opaalas technical Investigative 

apabihties, the FBI continues to be extremely concerned about the serious threat oospH hv 
the increasing proliferation of encryption technology that prevents access to criticar ^ 
n^i+n^rc through lawful electronic surveillance. The FBI and our law enforcement 

fn pnf 7"^ f'T working with Congress and the telecommunications industrv 

Samh and «feura.““ “”'““3'’ ''“tronlc surveillance and/o7 

Sl^o^ 'fn • ?"'* P"'°acement retrieve the same information 

ough metadata, the Cloud, or through guessing the password on the phone? 

i 'LTor - -- - 

access data via the Cloud with a search warrant but that will nnt 

Many criminal adversaries pay ciose attention to law enforcement's vulnerabilities and 
continually seek ways to exploit vulnerabilities. It is vital that law Lfo cfr^ent retain 
^pab,l,t,es to access the types of information needed to protect anS s^e the « 

ri^crSrtdCsVreeirVar^^^^^^^ 

"SruseS''l'r; enforcement has no issue with th"^"m2' co^ltment to 
unaulhnrt fn l, “ deploying the latest encryption technology to prevent 

What is missing is a vigorous commitment to assist law enforcement when electronic 
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su^eillance is authorized. It is vitaily important to distinguish between law enforcement's 
use of lawfully authorized electronic surveillance and "bulk collection." 

What IS needed is an open and frank dialogue about the responsibilities of industry to assist 

enforcement need to move forwar^and deveK 

framework under which both sides participate in striking an appropriate baiance among the 
onaw enforSen?'®"^"' Soals of competition and innovation, and the needs 


Why does law enforcement believe companies should be forced to build in 
comparnSr services? Don’t backdoors pose a security risk for 


That's a common misperception of what law enforcement needs and what law enforcement 
A^‘ is not asking for unfettered access into any provider's 

thrornh Irc develops a techScaVstandard 

^Se^nVin processes; a provider controls the technical solution 

iSSin^n ^ ensures its network is capable of isolating only the target 

when thP interception; and it disables the interception 

hv ^ expires. Law enforcement is only the recipient of the information collected 

laUufilXn^r’ ^ approach - where law enforcement first gains the ° 

lo conduct directs the provider 

? ^ 3n open, transparent process for identifying technical 

commp'n benefits everyone. First, the public can be assured that the capabilities are 

the already existing authorities granted to law enforcement by statute 
SndaVfi p'" responsibilities and all providers are held to the same 

u ■ playing field). Third, law enforcement can be confident that it wili 

pr^v^er" --"^ardless of the specific serle 

providers can minimize any risks by developing intercept 
rhppnpr the service's design phase. Such solutions are likely to be better, smarter 

qimnpf solutions that are retrofitted to existing products. There was 

hp an ^ apprehension during the initiai stages of discussions about CALEA - that there would 


How many companies or applications does the FBI 
they will not provide real time data? 


encounter where you know 


communication service providers that offer new services which do not 


M " "'‘"''•Xual to provide •'technical assistance" to 

an Official with a valid electronic surveillance order. Does the ohrase "technirai 
assistance" so vague that it leads to differences of interpretation” 

ISisLPr? 'P” “ftp" insufficient. The 
rnfnSfr^^ furnished by sonie providers simply does not provide law enforcement with the 
information it requested and which it needs to fully understand or acquire the relevant 
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As a practical matter, a CALEA compliant provider who has a built an intercept caoabilitv 

a DroSde^thafh'/^ ™" Tf eiforcament Immedfately'^^ whweas 

In "technicar assistance" S wwZt 

to attempting to render assistance must divert resources to react 

of the essence ^Des^oTte their^bP^ ^ ^tage-taking or kidnapping scenario, where time is 
me essence. Despite their best efforts, critical information will be lost due to the delay. 

It has been reported the government receives a daily dump of screen shot« fr«m 
companies. Why is this not good enough? ^ 

JailvTpno?^^l^‘’f "V?. that law enforcement receives a 

siCv --cam. 

There IS also an issue with law enforcement receiving "screen shots" in that thev arp 

-fcrcennent can expect''' 

'•espond when companies outright refuse to comply with a court 
order? How many times do you take that company to court? 

recourse available to law enforcement is to pursue an order to 

regents of 

X" n%r 

™e‘'?8Ts"clertton"2522Th!^^^ t'"''*® • enforcement provisions set forth 

CALEA As written the pnfn ^ incorporate the provisions of Section 108 of 

pntorol «- enforcement provisions are cumbersome and the pursuit of 
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Provision of the law cannot have 

issueJto^hl attenh^n Tf n" 'P™ e"for«nient to raise non-compliance 

issues to the attention of a company's senior management and work toward a common 

i^terestpri in*^ ° company's obligations. Law enforcement and prosecutors are more 

seized w?th a cTrr^ appropriate capabilities at their disposal when 

underlying issues, but this opbon Sramrv?able,T^^^^^ 

upd“ O'- - a need to 

p?p3ron " today's ever-widening gap between technology and law enforcement's 

electronic survei l ance capabilities is not a new phenomenon. For decadesjaw eSorcement 

rnnn^^c^-^ evolving communications technology, periodically requirinq 

Thf d'Enr ^T h ° capabilities with new technological 

aTv^c^na larh communications technology is 

rho cnnh-^K passing year brings a dramatic increase in the volume of communications 
the soph St, cat, on and complexity of communications service offerings, andX nur^be of 
rammun,cat,ons service providers. The same technology fueling this rapid InnLS 

Incre^Sgiy leTs“feSlelL7a interception of modem communications sereices 
mo-easingiy ess feasibie for law enforcement. Unless corrective action is taken iaw 

SomnSeti"^™""' capabilities will continue to erode and poteltlally 

How Will passage of the Domestic Retention and Investigatory Powers fDRiPl 
legislation in the United Kingdom, which requires companiesTo retain cii^Jomlr 
communications data, impact the Going Dark problem in the US? 

eUorSeli^rabmlvTeffp 1" '^Sislation will impact United States law 

enforcement s abihty to effect court orders. However, it does reflect the fact that the Ukr Iq 

acmg a similarly daunting chailenge in conducting electronic surveillance. 


Is It working as expected? Can I learn more 


NDCAC 

The FBI has launched the NDCAC. 
about the NDCAC? 

designed as a hub for technical knowledge management that 
acilitates the sharing of solutions and know-how among law enforcement agencies and 

leveraapqTch'^ enforcement's relationships with the communications industry. The NDCAC 
Z vinn £ I r" '^'^/"f°'-cement's collective technical knowledge and resources on issues 
g a time and stored communications to address challenges posed bv advanced 
oroTZ" """ technologies. But, it can't solve al? oflL^ enforcemZ's 

problems it allows a certain measure of self-help within the communitv The entirp 
community still necessarily relies on industry's asSstance. 

It is important to note that the NDCAC does not conduct research and develooment i.= nor 
responsible for the execution of any electronic surveillance court orders, and does not have 
i-pr^ 'feet operahonal or investigative role in investigations. Rather, the NDCAC provides 
techn,cal knowledge and referrals In response to requests for assistant froS^nrmember 
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More information is available on the website: http://www.ndcar ni.; r^m/ 

What is the NDCAC? 

a?5r"r"~ 

relationships with the communications industry. The NDCAC operate*; a 74/7 HoIh h u f 
commun® y f™'" “f »>« 'aw enforcement 

==SS£S=:SS£“ 

a referrals in response to law enforcement's requests for technical assistance. ^ 

Where is the NDCAC iocated and how is it staffed? 

The NDCAC is a Department of Justice organized facility operated by the FBI on behalf of 
wifh J community. It is located in Fredericksburg, Virginfa and is staffL 

staff ircom^rict'^n?^ dedicated to supporting the entire law enforcement community ^Its 
lumaf. Tf t !?'"'= L™"" enfofcement component egenl^ 

N^C^a. Marshals Service (ulMS) Tn Addition the 

NDCAC has engineers and support personnel on staff. m aaoition, the 

"hlrn'Zt ”■* “X wy a« we .nty learning about 

“terlTrt how to eavesdrop on 

internet- based and mobile communications? ** 

IlsSSSSSsSSSr" 

location cepabLes.Tne.lSetgl“:^^^^^^^^ 
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other federal, state, and local law enforcement agencies. It also develops its own courses 
to TIM in any gaps. 

Technical personnel from other federal, state, and local law enforcement agencies are able 
to obtain advice and guidance if they have difficulty implementing lawful electronic 
surveillance court orders. 

Does this increase in law enforcement's ability to monitor communications of 
innocent Americans pose a threat to civil liberties? 

Firs^ the NDCAC is not responsible for the actual execution of any electronic surveillance 
court orders and does not have any direct operational role in investigations. 

Second, with respect to law enforcement investigations, it is important to emphasize that 
we are only talking about lawful, court-ordered intercepts in ongoing investigations. When 
investigators cannot collect communications pursuant to court order in near real-time, they 
may be unable to act quickly to disrupt threats or to protect public safety. In order to 

intercept electronic communications, law enforcement must have a court-order authorizinq 
the intercept. ^ 


rH? employees carry out their mission according to an established set of rules 
and with full respect for the constitutional and statutory rights of the people. The FBI's 
Domestic Investigations and Operations Guide (DIOG) estabiishes the FBI's internal rules 
r the Attorney General's Guidelines for Domestic FBI Operations 

(AGG-Dom). The DIOG and AGG-Dom were promulgated in late 2008 to ensure that the FBI 
IS equipped with all lawful and appropriate tools so that it can transform itself into an 
mteiligence-driven organization that assesses and investigates criminal and national security 
threats to our nation and its people. ^ 

described as a secretive Internet-surveillance unit tasked 
this true?"® eavesdrop on web-based and mobile communications. 


No. There is nothing secret about the NDCAC. It is housed in a publicly identified location 
with a public website (http://www.ndcac.ciis.Qnv^ and a publicly available budget 

Additionally NDCAC received guidance from an executive advisory board whose meetings 
are open to the public. ^ 


The NDCAC does not conduct research and development, is not responsible for the actual 
execution of any electronic surveiliance court orders, and does not have any direct 
operational role in investigations. 


Additi^onally, the FBI does not randomly intercept electronic communications. FBI 
investigative activity follows an established set of rules with full respect for the 
constitutional and statutory rights of the people. In order to intercept electronic 

Srint:erc?^t°"^ ^ predicated investigation and a court-order authorizing 


Is it true that the NDCAC is working with specific communications 
develop back-doors" to facilitate law enforcement surveillance of 


providers to 
user accounts? 
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NDCAr industry in a number of different ways. Specificaily, the 

Identifies law enforcement s electronic surveillance needs, works to understLd 
providers capabilities, and validates that those industry solutions work. Neither the NDCAC 
nor aw enforcement requests or has the ability to control providers' solutions. Rather each 
provider IS responsible for its respective solution and provides to law enforcement any 
intercepted communications only with the appropriate lawful authorization. 


Is the NDCAC charged with creating customized surveillance technologies 
at a specific individual or company? 


aimed 


No. The NDCAC does not conduct research and development into electronic surveillance 
solutions. Further, the NDCAC is not responsible for the actual execution of any electronic 

Ratlhor operational role in investigations, 

ather, the NDCAC provides technicai knowledge and referrals in response to law 

en orcement s requests for technical assistance. Those referrals allow law enforcement to 
everage existing solutions, to the extent they exist, that may not be otherwise readily 


